Privacy
Last updated 6 September 2026. Arab Study Path is a student product. We collect only what the product needs to run.
Accounts
If you create an account we store your name, email, a salted password hash (never the password itself), and optional profile fields you type — country, school, field, intake. Session tokens are HMAC-signed and expire after 30 days.
Tools & leads
Some tools ask for an email so we can save a result to your profile. We do not sell that email. Tool answers you save (GPA, quiz, deadlines) stay attached to your account.
Community
Messages, reports and blocks are stored so the rooms can function and so moderation can keep them safe. A hashed IP is kept on community acknowledgements and admin audit events — not a raw address. Voice and image attachments you post are stored with the message.
Analytics
An anonymous pageview beacon records path + day only. No cookies for ads. No third-party trackers on the core pages. The public site and student sessions do not use cookies; the operator console uses one HttpOnly session cookie after a successful key, never on student pages.
What we do not do
- We do not sell personal data.
- We do not use your community posts to train public AI models.
- We do not require an account to browse universities or scholarships.
Your choices
You can edit your profile, change your password, and delete your own community messages. To close an account or request erasure, use the contact form and write from the email on the account — choose the privacy topic so the request is routed correctly.
Hosting is on Vercel; persistent data uses Upstash Redis in the region configured for the project.